CVE-2022-22296

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-01-24 · updated 2026-06-17
Weakness: CWE-276

Description

Sourcecodester Hospital's Patient Records Management System 1.0 is vulnerable to Insecure Permissions via the id parameter in manage_user endpoint. Simply change the value and data of other users can be displayed.

Affected products

Hospital'S Patient Records Management System Project Hospital'S Patient Records Management System: 1.0

References

https://github.com/vlakhani28/CVE-2022-22296/blob/main/README.md
https://github.com/vlakhani28/CVE-2022-22296/blob/main/README.md

Get alerted when CVE-2022-22296 or the next vulnerability affects your stack